Beginning with Ambari-2.4.0.0 and HDP-2.5.0, Ranger uses the Ambari Infra SolrCloud instance by default. Therefore, this
procedure is only necessary for earlier versions, or if you are setting up
additional SolrCloud instances.

Note

SolrCloud with Kerberos requires Apache ZooKeeper and MIT Kerberos. You should
also review the other SolrCloud
Prerequisites.

The
example above creates a headless keytab for the "solr" service user.
You should create one keytab per host. You should also create a
principal for each host on which Solr is running. Use the procedure
shown above, but use the principal name with the host. For
example:

kadmin.local: addprinc -randkey solr/<SOLR_HOST_NAME>@EXAMPLE.COM

You will also need another keytab for Spnego. This is used by Solr to
authenticate HTTP requests. Follow the process shown above, but replace
"solr" with "HTTP". For example:

On the Ambari dashboard, select Ranger >
Configs > Ranger Audit, then enable External
SolrCloud Kerberos by clicking the OFF button. The button label changes to ON when External SolrCloud Kerberos is
enabled.